SYSTEM AND METHOD FOR EXCHANGING ONLINE INFORMATION OVER 
PRIVATE NETWORK 

BACKGROUND OF THE INVENTION 

5 

Field of the Invention 

The present invention relates in general to the exchange 
of online information over a private network, and more 
particularly to a system and method for exchanging online 
10 information over a private network, wherein a server can send 
user datagram protocol (referred to hereinafter as UDP) 
standard-based data to a client connected thereto over the 
private network so that it can exchange the online information 
with the client according to a real-time protocol . 

15 

Description of the Prior Art 

Recently, the number of Internet users has rapidly 
increased, resulting in a shortage of Internet protocol 
(referred to hereinafter as IP) addresses. In order to solve 
20 such a shortage of Internet protocol addresses and enable 
accesses of a larger number of persons to an Internet network, 
there have been proposed private IP addresses, which have been 
often used for additional applications such as security and 
load balancing. 

25 Because such a private IP address is unique only in a 
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private network, it must be translated into a public IP 

address to enable an associated client to gain access to a 

server over an Internet network connected to a public network. 

The translation of a private IP address into a public IP 
5 address is typically called a network address translation 

(referred to hereinafter as NAT) . 

Provided that a client desiring to use online information 

over the Internet network employs not a public IP address, but 

a private IP address f a router acting to route the client to a 
10 server with a public IP address performs the NAT function to 

translate the private IP address employed by the client into a 

public IP address for access of the client to the server 

providing information desired by the client. 

The NAT may generally be classified into a static NAT and 
15 a dynamic NAT according to methods for translating a private 

IP address into a public IP address. Masquerading may be a 

special dynamic NAT. 

The static NAT is applied to the case where private IP 

addresses are the same in number as public IP addresses. In 
20 this case, the static NAT is adapted to translate private IP 

addresses into public IP addresses at one-to-one regular 

intervals . 

The dynamic NAT is applied to the case where private IP 
addresses are greater in number than public IP addresses. In 
25 this case, the dynamic NAT is adapted to assign public IP 
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addresses dynamically to private IP addresses. As a result, a 
public IP address assigned dynamically to a private IP address 
* is significant only when a client and server are kept 
connected to each other. Provided that the connection between 
5 the server and client is released, it will be impossible to 
gain access to the client using the public IP address assigned 
to the client. In this regard, the dynamic NAT function is 
often used in association with security related functions, 
vp The masquerading function is applied to the case where 

■f% 10 one public IP address is employed. For connection of a 
f.i plurality of clients with private IP addresses to an external 

^ server via one public IP address, port numbers are assigned 

respectively to the clients in addition to the public IP 
5j address, such that the plurality of private IP addresses are 

SI 15 mapped to the single public IP address. 

^ A client, connected to an external server over a private 

network on the basis of any NAT function as mentioned above, 
has an IP address on the private network, or a private IP 
address, different from an IP address for its actual address 

20 to the external server via a router, or a public IP address. 

Accordingly, as shown in Fig. 1, there is no problem for 
a client CI, connected to an external server SI over a private 
network on the basis of an NAT function, to exchange 
transmission control protocol (referred to hereinafter as TCP) 

25 standard-based information with the external server SI via a 
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router Rl, in that the TCP standard-based information can be 
sent and received under the condition that the client CI and 
server SI are kept connected to each other. However, as shown 
in Fig. 2, it is practically next to impossible for a client 
C2 to exchange user datagram protocol (referred to hereinafter 
as UDP) standard-based information with a server S2, because 
the UDP standard-based information may be sent and received 
under the condition that the client C2 and server S2 are not 
connected to each other, in a different manner from the TCP 
standard-based information. 

In other words, an IP address *205 .184 . 151 . 171' of the 
client C2 for actual access to the server S2 via a router R2 
is different from a private IP address '20. 0.0.1' of the 
client C2 in the private network. For this reason, a UDP 
packet, sent from the server S2 with a public IP address 
^203.235.37.101' to the client C2, is directed not to the 
client C2, but to a different client C3 with a public IP 
address ^205.184.151.171'. 

In particular, a voice packet with voice information 
complies with a real time protocol (referred to hereinafter as 
RTP) , which is based on the UDP standard. In this connection, 
it is actually impossible to send a UDP packet to the client 
employing the NAT function as stated above. 

In practice, many Voice Over IP (VoIP) providers for 
providing voice information sending/receiving services are 



also unable to perform two-way communications for a UDP 
standard-based packet with the NAT-based client as stated 
above . 

SUMMARY OF THE INVENTION 

Therefore, the present invention has been made in view of 
the above problem, and it is an object of the present 
invention to provide a system and method for exchanging online 
information over a private network, wherein a client with a 
private Internet protocol address can perform two-way 
communications for user datagram protocol standard-based 
information with a server. 

In accordance with one aspect of the present invention, 
the above and other objects can be accomplished by the 
provision of a method for exchanging online information over a 
private network in a client/server system, the client/server 
system including a client for sending and receiving the online 
information over an Internet network, and a server connected 
to the client via a router, the method comprising the steps of 
a) , by the server, determining whether the client uses the 
private network and sending the determined result to the 
client; b) , by the client, sending information about its valid 
Internet protocol (IP) addresses and information about its 
actually used IP address to the server if the result 



determined at the step a) indicates that the client uses the 
private network; c) , by the server, sending acknowledgement 
information to all of the IP addresses contained in the 
information sent at the step b) , the acknowledgement 
information containing information regarding an IP address of 
the client for actual access to the server via the router; d) , 
by the client, determining from the acknowledgement 
information sent at the step c) whether it employs a private 
IP address; and e) , by the router, storing the information 
about the actually used IP address of the client if it is 
determined at the step d) that the client employs the private 
IP address, and then exchanging the online information between 
the server and the client via the actually used IP address of 
the client. 

In accordance with another aspect of the present 
invention, there is provided a system for exchanging online 
information over a private network in a client/ server system, 
the client/server system including a client for sending and 
receiving the online information over an Internet network, and 
a server connected to the client via a router, wherein the 
client is adapted for sending first information about its 
Internet protocol (IP) address for access to the server, to 
the server upon accessing the server, determining whether it 
uses the private network, from first acknowledgement 
information sent from the server in response to the first 



information, and sending second information to the server upon 
determining that it uses the private network, the second 
information containing information about valid IP addresses of 
the client and information about an actually used IP address 
5 of the client; the server is adapted for comparing the access 
IP address contained in the first information sent from the 
client with an IP address of the client for actual access to 
the server via the router to determine whether the two IP 
addresses are the same, sending the determined result as the 
10 first acknowledgement information to the client and then 
sending second acknowledgement information to all of the IP 
addresses contained in the second information, sent from the 
client in response to the first acknowledgement information, 
such that the client determines on the basis of the second 
15 acknowledgement information whether it employs a private IP 
address, the second acknowledgement information containing 
information regarding the IP address of the client for actual 
access to the server via the router; and the router is adapted 
for storing the information about the actually used IP address 
20 of the client if the client determines on the basis of the 
second acknowledgement information from the server that it 
employs the private IP address, and then delivering a message 
sent from the server to the client via the actually used IP 
address of the client stored therein, such that the client 
25 exchanges the online information with the server. 
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BRIEF DESCRIPTION OF THE DRAWINGS 



The above and other objects, features and advantages of 
the present invention will be more clearly understood from the 
5 following detailed description taken in conjunction with the 
accompanying drawings, in which: 

Fig. 1 is a block diagram illustrating a conventional 
method for exchanging a transmission control protocol (TCP) 
packet over a private network; 
10 Fig. 2 is a block diagram illustrating a conventional 

method for exchanging a user datagram protocol (UDP) packet 
over a private network; 

Fig. 3 is a block diagram illustrating the flow of 
information in a system for exchanging online information over 
15 a private network in accordance with the present invention; 

Fig. 4 is a block diagram showing formats of packets sent 
and received in the online information exchange system in 
accordance with the present invention; and 

Figs. 5a and 5b are flowcharts illustrating a method for 
20 exchanging online information over a private network in 
accordance with the present invention. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

25 Fig. 3 is a block diagram illustrating the flow of 
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information in a system for exchanging online information over 
a private network in accordance with the present invention. 
As shown in this drawing, the present online information 
exchange system comprises a router R, a server S, and a client 
C for sending and receiving online information to/from the 
server S through the router R. 

The client C may employ a plurality of private or public 
Internet protocol (IP) addresses. Provided that the client C 
employs a private IP address , it will use a private network. 
In this case, the private IP address of the client C is 
translated into a public IP address by an NAT function of the 
router R upon accessing the external server S. 

The server S exchanges online information with the client 
C connected thereto via the router R. In order to perform 
two-way communications for a real time protocol (RTP) /user 
datagram protocol (UDP) standard-based packet with the client 
C, the server S must determine whether the client C uses a 
private network and in turn from the determined result whether 
the client C employs a private IP address. 

Thus, the client C sends to the server S first 
information (e in Fig. 3) about its IP address for access to 
the server S. In response to the first information from the 
client C, the server S sends first acknowledgement information 
(£ in Fig. 3) to the client C, which then determines from the 
first acknowledgement information whether it uses a private 



network. Thereafter , for a determination as to whether the 

client C employs a private IP address, the client C sends to 
* the server S a transmission control protocol (TCP) packet (Z 

in Fig, 3) with information about its valid IP addresses and a 
5 UDP packet (V in Fig. 3) with information about its actually 

used IP address. 

It should be noted herein that the access IP address and 

the actually used IP address may be different or the same in 
yg that the client C may employ a plurality of IP addresses as 
m 10 needed. 

Upon receiving the first information about the access IP 
% address from the client C, the server S compares the access IP 
L address with an IP address of the client C for actual access 
J 1 to the server S via the router R, namely, a public IP address 
Sj 15 of the client C recognized by the server S. 

H> In case the access IP address is the same as the actual 

access IP address, it is signified that the client C is 
connected to the sever S not via a private network, but via a 
public IP address. As a result, the server S can perform two- 
20 way communications for a UDP packet with the client C without 
any problem. 

Alternatively, in the case where the access IP address is 
not the same as the actual access IP address, it is signified 
that the client C uses a private network. In this case, a 
25 determination must be made as to whether the client C employs 
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a private IP address , or a public IP address under the 
condition that it uses a proxy server to use a private 
network. 

Accordingly, the server S determines whether the access 
5 IP address is the same as the actual access IP address and 

then sends the first acknowledgement information to the client 

C as a result of the determination. 

Where the client C recognizes on the basis of the first 

acknowledgement information from the server S that the access 
10 IP address is different from the actual access IP address, 

namely, that the client C uses a private network, then it 

sends to the server S second information consisting of 

information about a list of its valid IP addresses in the form 

of a TCP packet and information about its actually used IP 
15 address in the form of a UDP packet. In that the server s has 

a public IP address, the client C can send a UDP packet to the 

server S at any time. 

The server S sends a UDP packet (® in Fig. 3) with 

second acknowledgement information to all of the IP addresses 
20 contained in the second information from the client C. The 

second acknowledgement information contains information 

regarding an IP address of the client C for actual access to 

the server S via the router R. 

The client C compares a list of all IP addresses thereof 
25 with the IP address contained in the second acknowledgement 
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information from the server S. Where any one of the IP 
addresses in the list is the same as the IP address contained 
in the second acknowledgement information, it is signified 
that the client C has a public IP address but operates on a 
5 private network, namely, it uses a proxy server. In case none 
of the IP addresses in the list is the same as the IP address 
contained in the second acknowledgement information, it is 
indicated that the client C is connected to the server S via a 
private IP address on a private network on the basis of the 
10 NAT function of the router R. 

The server S can send a UDP packet directly to the client 
C if the client C uses a proxy server, but cannot do so if the 
client C employs a private IP address. 

As a result, in case of determining that the client C 
15 uses a private network and also employs a private IP address, 
the client C notifies the server S of such a fact (© in Fig. 
3) , thereby allowing the server S to control the router R in 
such a manner that the router R stores information regarding 
an actually used IP address of the client C and maps it to the 
20 client C. 

With the information regarding the actually used IP 
address of the client C, or information about a private IP 
address of the client C, stored in the router R, the server S 
can send a UDP packet (™ in Fig. 3) to the client C via the 
25 router R even though it does not know the private IP address 
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of the client C. 

In other words, if the server S sends a UDP packet to the 
router R, then the router R delivers the sent UDP packet to 
the client C on the basis of private IP address information 
5 pre-stored therein. Therefore, the client C can perform two- 
way communications for a UDP packet with the external server S 
even when it employs a private IP address. 

On the other hand, unless a UDP packet is exchanged 
between the client C and the server S for a predetermined 
10 period of time or more, the router R releases the IP address 
mapped to the client C. 

Fig. 4 is a block diagram showing formats of packets sent 
and received in the online information exchange system in 
accordance with the present invention. 
15 i n pig. 4, "Pl" represents a packet sent as indicated by 

£ in Fig. 3, which is composed of a definition statement for 
defining the packet, and a 4-byte user index statement for 
identifying a client sending the packet later over a private 
network. For example, private IP addresses of two or more 
20 clients may be transformed into the same public IP address by 
masquerading. In this case, the use of the user index 
statement makes it possible to distinguish a client attempting 
to exchange a UDP packet with the server S, from the clients 
with the same public IP address. 
25 "P2" represents a packet sent as indicated by Z in Fig. 
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3. This packet is composed of a definition statement a count 

* 

statement for counting the number of IP addresses , an IP 
statement for representing an IP address, and a repeated 
sequence thereof. 
5 "P3" represents a packet sent as indicated by V in Fig. 

3. This packet is composed of a private network statement for 
indicating the use or not of a private network, a definition 
statement and a user index statement. The user index 
JS statement of P3 makes it possible for the server S to 
*S 10 distinguish a specific client from other clients sending 
l xl various information. 

% >X P4" represents a packet sent as indicated by ® in Fig. 

;L 3, which is composed of a server statement for indicating that 

^ this packet is sent from the server, a definition statement, 

S! 15 and an IP statement for representing an IP address of a 
specific client for actual access to the server. 

n P5" represents a packet sent as indicated by © in Fig. 
3, which is composed of a definition statement and IP 
statement. The IP statement of P5 contains information about 
20 a public IP address of the client C when the client C employs 
the public IP address r and a character NULL when the client C 
employs a private IP address. Hence, the use of this IP 
statement enables the server S to determine whether the client 
C employs a private IP address. 
25 U P6" represents a packet sent only when the client C 
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employs a private IP address. Where the client C with the 
private IP address desires to access an external Internet 
network with a public IP address, or the server S attempts to 
access the client C, then the client C sends a UDP packet with 
a private network statement, definition statement and user 
index statement according to the RTP, 

"P7" also represents a packet sent only when the client C 
employs a private IP address, which is indicated by ™ in Fig. 
3. This packet includes a server statement, a definition 
statement, and an IP statement composed of NULL. 

A detailed description will hereinafter be given of the 
operation of the online information exchange system with the 
above-stated construction in accordance with the present 
invention with reference to Figs. 5a and 5b. 

Figs. 5a and 5b are flowcharts illustrating a method for 
exchanging online information over a private network in 
accordance with the present invention. 

At the first step SI, a client with a plurality of 
private or public IP addresses is connected to a server with a 
public IP address via an IP address for access to the server. 

At the second step S2, the client sends first information 
about the access IP address to the server. 

At the third step S3, the server compares the access IP 
address contained in the first information sent from the 
client at the above second step S2 with an IP address of the 
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client for actual access to the server via a router to 
determine whether the two IP addresses are the same, and then 
determines from the compared result whether the client uses a 
private network. The server then sends the determined result 

5 as first acknowledgement information to the client. 

In the case where it is determined at the above third 
step S3 that the access IP address and the actual access IP 
address are the same, it is signified that the client employs 
a public IP address. As a result, the client is connected to 

10 the server via the public IP address in response to the first 
acknowledgement information from the server at the fourth step 
S4. 

In case it is determined at the above third step S3 that 
the access IP address and the actual access IP address are not 

15 the same, it is signified that the client uses a private 
network. As a result, at the fifth step S5, in response to 
the first acknowledgement information from the server, the 
client sends to the server second information consisting of 
information about its valid IP addresses in the form of a TCP 

20 packet and information about its actually used IP address in 
the form of a UDP packet. 

At the sixth step S6, the server sends a UDP packet with 
second acknowledgement information to all of the IP addresses 
contained in the second information sent from the client at 

25 the above fifth step S5. The second acknowledgement 
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information contains information regarding an IP address of 
the client for actual access to the server via the router. 
- At the seventh step SI, the client compares a list of IP 

addresses thereof with the IP address contained in the second 
5 acknowledgement information sent from the server at the above 
sixth step S6 to determine whether the IP address contained in 
the second acknowledgement information is present in the IP 
address list. 

O 

yy Where the IP address contained in the second 

yet 10 acknowledgement information is determined to be present in the 
yj IP address list at the above seventh step S7, the client 
recognizes that it uses a private network but employs a public 
^ IP address, namely, it uses a proxy server. The client then 
!f! notifies the server of the fact that it employs no private IP 
y 15 address, at the eighth step S8. 

M At the ninth step S9, the client is connected to the 

server via the public IP address on the private network to 
exchange online information with the server. 

On the other hand, in case the IP address contained in 

20 the second acknowledgement information is determined not to be 
present in the IP address list at the above seventh step S7, 
the client recognizes that it employs a private IP address, 
and then notifies the server of the fact that it employs the 
private IP address, at the tenth step S10. 

25 At the eleventh step Sll, the router stores an actually 
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used private IP address of the client and maps it to the 
client. 

At the twelfth step 312 f the router connects the server 
to the client via the actually used private IP address of the 
5 client stored therein to deliver online information sent from 
the server to the client. Therefore, the server can send a 
UDP packet to the client via the actually used private IP 
address of the client stored in the router. 
i,5 At the thirteenth step SI 3, the router determines whether 

fep 10 information is exchanged in a UDP packet form between the 
yj server and the client for a predetermined period of time. 
^ Upon determining that the information is exchanged between the 

server and the client, the router maintains the connection 
:f; made at the above twelfth step S12. 

y 15 Alternatively, if it is determined at the above 

H= thirteenth step S13 that no information is exchanged between 

the server and the client for the predetermined time period, 
then the router releases the IP address mapped to the client 
at the above eleventh step Sll and ends two-way UDP packet 
20 communications between the server and the client, at the 
fourteenth step S14. 

In the above manner, two-way UDP packet communications 
can be performed between a client with a private IP address 
and a server. If the client desires to conduct two-way UDP 
25 packet communications with the server, it can attain the 
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desired purpose by first sending a UDP packet to the server in 
the above manner. 

For a client whose private IP address is transformed into 
a public IP address by masquerading, information regarding a 

5 used port as well as the private IP address is previously 
notified to a server as a UDP packet destination and a router 
and then mapped by the router. Thus, the server can also send 
a UDP packet to a client whose private IP address is 
transformed into a public IP address by the masquerading. 

10 As apparent from the above description, the present 

invention provides a system and method for exchanging online 
information over a private network, wherein a client with a 
private IP address can exchange a UDP packet with a server 
with a public IP address according to a real time protocol by 

15 first sending information about its IP address to the server 
such that a router connecting the server to the client maps 
the sent IP address information to the client. Therefore, the 
client and server can perform two-way UDP packet 
communications therebetween. 

20 Although the preferred embodiments of the present 

invention have been disclosed for illustrative purposes, those 
skilled in the art will appreciate that various modifications, 
additions and substitutions are possible, without departing 
from the scope and spirit of the invention as disclosed in the 

25 accompanying claims . 
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